Networked electronic ordnance system

ABSTRACT

The networked electronic ordnance system connects a number of pyrotechnic devices to a bus controller using lighter and less voluminous cabling, in a more efficient network architecture, than previously possible. Each pyrotechnic device contains an initiator, which includes a pyrotechnic assembly and an electronics assembly. One or more pyrotechnic devices each contain a logic device having a unique identifier. The pyrotechnic devices are individually controlled by the bus controller by addressing the unique identifier of each logic device. Each pyrotechnic device preferably includes an energy reserve capacitor which stores firing energy upon arming. Both digital and analog fire control conditions are provided before an armed pyrotechnic device can be fired. A plurality of initiators and/or other components of the system may be packaged together on a single substrate and networked together via that substrate.

BACKGROUND OF THE INVENTION

The field of this invention relates to a networked system of pyrotechnicdevices.

Pyrotechnic devices play an increasingly important role in aerospacevehicles and systems such as rockets, aircraft and spacecraft. As anexample, the number of pyrotechnic devices used on a typical missile hasincreased over the years from less than ten to as many as two hundred ormore. The additional pyrotechnic devices may be used for severalpurposes. For example, multiple lower-powered initiators may be used inplace of a single higher-powered initiator to provide flexibility in theamount of force that can be generated at a single location on thevehicle. However, the use of additional pyrotechnic devices carries withit the burden of additional infrastructure within the vehicle or systemusing these devices. As the number of pyrotechnic devices in a vehicleor system increases, several other things increase as well, such ascabling length, cable quantity, weight, number of parts, power usage,system complexity, manufacturing time and system cost. In an environmentsuch as a rocket or missile, weight and volume are at a premium, and anincrease in pyrotechnic system weight and volume presents packaging andweight management problems which may require significant engineeringtime to solve.

One source of these problems is cable size and weight. FIG. 1 shows atypical prior art installation of pyrotechnic initiators 100, where eachpyrotechnic initiator 100 is connected to a fire control unit 102, whichtransmits firing energy to the pyrotechnic devices 100 when a signal todo so is received from a controller 104. Typically, these devices areconnected in an inefficient branching configuration. That is, a separatecable 106 connects each pyrotechnic device 100 individually to a firecontrol unit 102. Each of the cables 106 is a high-power cable, shieldedto reduce or eliminate exposure to electromagnetic interference (EMI),electromagnetic pulse (EMP), or radio frequency (RF) interference withinthe cable 106. If the cable were not shielded, these sources ofinterference could potentially interfere with the operation of one ormore of the pyrotechnic devices 100. The cables 106 used are typicallyat least as large as 18 gauge, because the cables 106 typically have tocarry large transient currents of one to five amperes or more duringfiring. In the aggregate, the large number of high-power shielded cables106 required for the branching configuration of the prior art are heavyand occupy significant volume, resulting in weight and packagingdifficulties within an aircraft, spacecraft, missile, launch vehicle orother application where weight and space are at a premium. Further, incurrent systems, each fire control unit 102 can typically only support arelatively small number of pyrotechnic devices 100. Thus, multiple firecontrol units 102 may be required, further increasing the weight andvolume of the overall pyrotechnic system 108.

Pyrotechnic systems used in aerospace systems also typically require aseparate ordnance system battery 112 and power circuit, independent fromthe vehicle avionics batteries 110. This separate power system isrequired because surge currents occur in the power cabling when apyrotechnic device is fired, potentially interfering with the avionicssystem. One or more separate ordnance system batteries 112 typically areused for firing. Due to the high delivery current required, the ordnancesystem batteries 112 are typically large and heavy. Thus, a separateordnance system battery 112 and its attendant cabling add still moreweight to a complex pyrotechnic system in an aerospace vehicle.

SUMMARY OF THE PREFERRED EMBODIMENTS

The networked electronic ordnance system of the present inventionconnects a number of pyrotechnic devices to a bus controller usinglighter and less voluminous cabling, in a more efficient networkarchitecture, than previously possible. Each pyrotechnic device containsan initiator, which includes a pyrotechnic assembly and an electronicsassembly.

In an aspect of a preferred embodiment, one or more pyrotechnic deviceseach contain a logic device that controls the functioning of theinitiator. Each logic device has a unique identifier, which may bepre-programmed, or assigned when the networked electronic ordnancesystem is powered up.

In another aspect of a preferred embodiment, two or more pyrotechnicdevices are networked together with a bus controller. The networkconnections may be accomplished serially, in parallel, or a combinationof the two. Thin, low-power cabling is used to connect the pyrotechnicdevices to the bus controller. The cabling, when coupled with the buscontroller, is substantially insensitive to EMI, EMP and RF signals inthe ambient environment, and weigh less than the high-power shieldedcables used in the prior art.

In another aspect of a preferred embodiment, both digital and analogfire control conditions must be met before a pyrotechnic device can befired.

In another aspect of a preferred embodiment, each pyrotechnic deviceincludes an energy reserve capacitor (ERC) which stores firing energyupon arming. By storing firing energy within each pyrotechnic device,surge currents in the network are reduced or eliminated, therebyeliminating the need for separate ordnance system batteries or powercircuits.

In another aspect of a preferred embodiment, a plurality of initiatorsare packaged together on a single substrate and networked together viathat substrate.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a schematic view of a prior art pyrotechnic system.

FIG. 2 is a schematic view of a networked electronic ordnance system.

FIG. 3 is a schematic view of a pyrotechnic device for use in anetworked electronic ordnance system.

FIG. 4 is a flow chart illustrating the process by which the networkedelectronic ordnance system tests, arms and fires its pyrotechnicdevices.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

Referring to FIG. 2, a preferred embodiment of a networked electronicordnance system 200 is shown. The networked electronic ordnance system200 includes a number of pyrotechnic devices 202 interconnected by acable network 204, which may be referred to as a bus. The cable network204 also connects the pyrotechnic devices 202 to a bus controller 206.In a preferred embodiment, the cable network 204 is formed from at leastone two-wire cable which provide low voltage and low current power, andcontrol signals, to the pyrotechnic devices 202. As used in thisdocument, the word “cable” may refer to multiple strands of associatedwire, a single wire, or other appropriate conductors, such as flexiblecircuit boards. Electric power transmission and signal transmissionpreferably both occur over the same cable in the cable network 204,thereby eliminating any need to provide separate power and signalcables. In a preferred embodiment, the cable network 204 is built fromtwisted shielded pair cable as small as 28 gauge. Such twisted shieldedpair cable is known to those skilled in the art. However, the cables maybe flat ribbon cable, or another type of cable capable of carrying lowvoltage and current power and signals, if desired. Further, the cablenetwork 204 may be constructed from cables having other gauges,depending on the application in which the cable network 204 is used. Thespecific type of cable used, and its gauge, depends on weight, packagingand other constraints imposed by the application in which the networkedelectronic ordnance system 200 is used. The cable network 204 ispreferably built with shielded cable. The cable network 204 preferablycarries both digital signals and power to and from the bus controller206. The cable network 204 preferably distributes electric power havinga current on the order of magnitude of milliamperes. Because the cablenetwork 204 distributes power and signals at low voltage and lowcurrent, flexible thin cables may be used, facilitating the integrationof the networked electronic ordnance system 200 into an aircraft,missile, or other device.

In one embodiment, the pyrotechnic devices 202 are connected in parallelby the cable network 204, as shown in FIG. 2, or by other parallelconnection strategies. Parallel connection provides an added level ofreliability to the networked electronic ordnance system 200. However,the pyrotechnic devices 202 may be connected serially by the cablenetwork 204. Serial connection may be advantageous in applications wherepackaging, weight and/or simplicity concerns are particularly important.The serial connection may be accomplished by connecting each of thepyrotechnic devices 202 to a single serial bus, by daisy-chaining thepyrotechnic devices together, or by other serial connection strategies.

The bus controller 206 preferably performs testing upon, and controlsthe arming and firing of, pyrotechnic devices 202 via the network 204.Preferably, the bus controller 206 includes or consists of a logicdevice programmed with instructions for controlling the test andoperation of the pyrotechnic devices 202 and cable network 204 attachedto it. The bus controller 206 may be an ASIC, a microprocessor, afield-programmable gate array (FPGA), discrete logic, another type oflogic device, or a combination thereof. Depending on the application inwhich the bus controller 206 is used, the bus controller 206 itself maybe connected to a fire control system or information handling systemassociated with the vehicle or device in which the networked electronicordnance system 200 is used. Alternately, the bus controller 206 may beincorporated into or otherwise combined with one or more processors orinformation handling systems in the vehicle or device in which thenetworked electronic ordnance system 200 is used. Further, the buscontroller 206 may stand alone, and receive input signals from a humanor mechanical source. The bus controller 206 preferably is electricallyconnected to an avionics battery 110, from which power is drawn.

In a preferred embodiment, each pyrotechnic device 202 may be any devicecapable of pyrotechnic initiation, such as but not limited to rocketmotor igniters, thermal battery igniters, bolt cutters, cable cutters,and explosive bolts. The pyrotechnic devices 202 connected to a singlebus controller 206 need not be of the same type, but rather may bedifferent types of pyrotechnic devices 202 interconnected via the cablenetwork 204. For example, an explosive bolt and a cable cutter may beconnected together via the same cable network 204. Referring also toFIG. 3, a pyrotechnic device 202 has several subcomponents. A businterface 312 is preferably included in the pyrotechnic device 202. Thebus interface 312 is an electronic component that preferably acceptssignals from the cable network 204 before those signals are passedfurther into the pyrotechnic device 202. Bus interfaces are well knownto those skilled in the art. The pyrotechnic device 202 includes a logicdevice 300 electrically connected to the bus interface 312. If the businterface 312 is not used, then the logic device 300 is preferablyconnected directly to the cable network 204. An initiator 304 within thepyrotechnic device 202 preferably includes an electronic assembly 308and a pyrotechnic assembly 310. The pyrotechnic assembly 310 containspyrotechnic material, and the electronic assembly 308 receives firingenergy and directs it to the pyrotechnic assembly 310 for firing. Theelectronic assembly 308 preferably includes an energy reserve capacitor(ERC) 302. As used in the document, the term “initiator” refers to thecombination of a pyrotechnic assembly 310 and an electronic assembly 308within a pyrotechnic device 202. Thus, a pyrotechnic device 202 such asa bolt cutter or cable cutter will include an initiator 304 that, uponfiring, exerts force on one or more components of the pyrotechnic device202 to produce a bolt-cutting or cable-cutting action.

The ERC 302 is preferably included within the electronic assembly 308.However, the ERC 302 may be located elsewhere in the pyrotechnic device202 if desired. By way of example and not limitation, the ERC 302 may belocated adjacent to the electronic assembly 308, or within the logicdevice 300. Further, more than one energy reserve capacitor 302 may beprovided within the electronic assembly 308 or within a singlepyrotechnic device 202. Upon receipt of an arming command, the ERC 302begins to charge, using power from the cable network 204. In a preferredembodiment, the ERC 302 has a capacitance of two microfarads, and iscapable of charging in five milliseconds or less. However, the ERC 302may have a larger or smaller capacitance, or a larger or smallercharging time, based on the particular application of the pyrotechnicdevice 202 and the type of initiator 304 used.

The type of initiator 304 used will vary depending on the applicationfor which the networked electronic ordnance system 200 is used. In apreferred embodiment, a thin film bridge initiator 304 is placeddirectly on a substrate onto which the logic device 300 are mounted.Thin film bridge initiators are presently well known to those skilled inthe art. In a preferred embodiment, the substrate is flexible andcomposed at least partly of KAPTON® brand polyamide film produced byDuPont Corporation. However, other insulative materials may be used forthe substrate. In a preferred embodiment, circuit traces on thesubstrate connect the logic device 300 to the initiator 304. By usingcircuit traces to connect the logic device 300 to the initiator 304, theneed for wire bonding to the thin film bridge initiator 304 iseliminated, simplifying packaging and increasing reliability. However,wire bonding or other types of connection may be used to connect thelogic device 300 to the thin film bridge initiator 304, if desired. Ifdesired, multiple initiators 304 may be combined on a single substrate,which may be advantageous in applications where two or more initiators304 are located in close proximity to one another. The pyrotechnicdevice 202 need not utilize a substrate at all, and indeed mayadvantageously omit the substrate if some other types of initiator 304are used. Further, the initiator 304 need not be a thin film bridgeinitiator, and may be any other type of initiator 304, such as but notlimited to a traditional initiator in which a bridge wire passes througha pyrotechnic material, or a semiconductor bridge where a thin bridgeconnects two larger lands.

The logic device 300 within each pyrotechnic device 202 is preferably anapplication-specific integrated circuit (ASIC). However, the logicdevice 300 may be any other appropriate logic device 300, such as butnot limited to a microprocessor, a field-programmable gate array (FPGA),discrete logic, or a combination thereof. Each logic device 300 has aunique identifier. In a preferred embodiment, the unique identifier is acode that is stored as a data object within the logic device 300.Preferably, the unique identifier is permanently stored within the logicdevice 300 as a data object. However, a unique identifier may beassigned to each logic device 300 by the bus controller 206 each timethe networked electronic ordnance system 200 is powered up, may beencoded permanently into the hardware of the logic device 300, orotherwise may be uniquely assigned to each logic device 300. The uniqueidentifier is preferably digital, and may be encoded using anyaddressing scheme desired. By way of example and not limitation, theunique identifier may be defined as a single bit within a data wordhaving at least as many bits as the number of pyrotechnic devices 202 inthe networked electronic ordnance system 200. All bits in the word areset low except for one bit set high. The position of the high bit withinthe word serves to uniquely identify a single logic device 300. Otherunique identifiers may be used, if desired, such as but not limited tonumerical codes or alphanumeric strings.

A digital command signal is transmitted from the bus controller 206 to aspecific logic device 300 by including an address field, frame or othersignifier in the command signal identifying the specific logic device300 to be addressed. By way of example and not limitation, referringback to the example above of a unique identifier, a command signal mayinclude an address frame having the same number of bits as theidentifier word. All bits in the address frame are set low, except forone bit set high. The position of the high bit within the address framecorresponds to the unique identifier of a single pyrotechnic device 202.Therefore, this exemplary command would be recognized by the logicdevice 300 having the corresponding unique identifier. As with theunique identifier, other addressing schemes may be used, if desired, aslong as the addressing scheme chosen is compatible with the uniqueidentifiers used.

The addressing scheme preferably may be extended to allow the buscontroller 206 to address a group of pyrotechnic devices 202 at once,where that group ranges from two pyrotechnic devices 202 to all of thepyrotechnic devices 202. By way of example and not limitation, bysetting more than one bit to high in the address frame, a group ofpyrotechnic devices 202 may be fired, where the logic device 300 in eachpyrotechnic device 202 in that group has a unique identifiercorresponding to a bit set to high in the address frame. As anotherexample, an address frame having all bits set low and no bits set tohigh may constitute an “all fire” signifier, where each and every logicdevice 300 is programmed to recognize a command associated with theall-fire signifier and fire its associated pyrotechnic device 202. Othergroup firing schemes and all fire signals may be used if desired.

The design and use of an logic device 300 are known to those skilled inthe art. Among other functions, the logic device 300 is adapted to test,arm, disarm and fire the pyrotechnic device 202 when commanded by thebus controller 206, as described below. In a preferred embodiment, thelogic device 300 is combined with other electronics in the pyrotechnicdevice 202 for power management, safety, and electrostatic discharge(ESD) protection; such electronics are known to those skilled in theart. Two or more separate logic devices 300 may be provided within apyrotechnic device 202, if desired. If multiple logic devices 300 areused, then functionality may be divided among different logic devices300, or may be duplicated in separate logic devices 300 for redundancy.

The number of pyrotechnic devices 202 which may be attached to a singlebus controller 206 varies depending upon the number of uniqueidentifiers available, the construction of the bus controller 206, thepower capabilities of the cable network 204, the distance spanned by thecable network 204, and the environment in which the networked electronicordnance system 200 is to be used. By way of example and not limitation,if the identification scheme is capable of generating sixteen uniqueidentifiers, no more than sixteen pyrotechnic devices 202 are connectedto a single bus controller 206, so that the bus controller 206 canuniquely address each of the pyrotechnic devices 202 connected to it.

In a preferred embodiment, each pyrotechnic device 202 includes aFaraday cage 306 to shield the logic device 300 and any other electroniccomponents within, as well as the initiator 304. A Faraday cage 306 is aconductive shell around a volume which shields that volume from theeffects of external electric fields and static charges. The constructionand use or a Faraday cage 306 is known to those skilled in the art. Byincluding a Faraday cage 306 around at least part of the pyrotechnicdevice 202, inadvertent ignition in a strong electromagnetic radiationenvironment may be prevented. However, the Faraday cage 306 may beomitted from one or more of the pyrotechnic devices 202, particularly inapplications where the expected electromagnetic radiation environment ismild, or where the pyrotechnic device 202 is itself placed in a largerstructure shielded by a Faraday cage or other shielding device.

In a preferred embodiment, the networked electronic ordnance system 200does not require a separate power source, but rather shares the samepower sources as the other electronic systems in the vehicle or system.Typically, an avionics battery (not shown) is provided for powering theavionics within an aerospace vehicle, and a networked electronicordnance system 200 used in such an aerospace vehicle preferably drawspower from that avionics battery. Because the activation energy for eachpyrotechnic device 202 is stored in the ERC 302, minimal or no surgecurrents occur in the cable network 204 when a pyrotechnic device isfired. Thus, the networked electronic ordnance system 200 may operatewithout the need for a separate battery and power distribution network.

Referring also to FIG. 4, in step 400, in a preferred embodiment the buscontroller 206 periodically queries each pyrotechnic device 202 todetermine if the firing bridge in each pyrotechnic device 202 is intact.The frequency of such periodic queries depends upon the specificapplication in which the networked electronic ordnance system 200 isused. For example, the bus controller 206 may query each pyrotechnicdevice 202 every few milliseconds in a missile application where themissile is en route to a target, or every hour in a missile applicationwhere the missile is attached to the wing of an aircraft. Preferably,the bus controller 206 performs this query by transmitting a device testcommand to each pyrotechnic device 202. In a preferred embodiment, thedevice test signal consists of a test command and an address frame. Theaddress frame is as described above, and allows a device test command tobe transmitted to one or more specific pyrotechnic devices 202. Thus,each logic device 300 to which the test signal is addressed receives thetest signal, recognizes the address frame and test command, and performsthe requested test. After the test is performed in a pyrotechnic device202, the logic device 300 in that pyrotechnic device 202 preferablyresponds to the bus controller 206 by transmitting test results over thenetwork 204. The bus controller 206 may then report test results in turnto a central vehicle control processor (not shown) or may simply recordthat data internally or display it in some manner to an operator or userof the networked electronic ordnance system 200.

Preferably, one test that is performed is a test of the integrity of thefiring element within each initiator 304. The firing element is thebridge, wire, or other structure in contact with the pyrotechnicmaterial in the pyrotechnic assembly 310. Determining whether the firingelement is intact in each initiator 304 is important to verifying thecontinuing operability of the networked electronic ordnance system 200.Further, by determining which specific firing element or elements havefailed in a pyrotechnic system, repair of the pyrotechnic devices 202having initiators 304 with such damaged firing elements is facilitated.The bus controller 206 issues a test signal to one or more specificpyrotechnic devices 202, where that test signal instructs each receivingpyrotechnic device 202 to test the integrity of the firing element. Thelogic device 300 within each pyrotechnic device to which the test signalis addressed receives the test signal, recognizes the address frame andtest command, and tests the integrity of the firing element. In apreferred embodiment, the integrity of the firing element is tested bypassing a very small controlled current through it. After the test isperformed in a pyrotechnic device 202, the logic device 300 in thatpyrotechnic device 202 responds to the bus controller 206 bytransmitting test results over the network 204. In a preferredembodiment, the possible outcomes of the test are resistance too high,resistance too low, and resistance in range. If the resistance is toohigh, the bus controller 206 infers that the firing element is brokensuch that current will not flow through it easily, if at all. If theresistance is too low, the bus controller 206 infers that the firingelement has shorted out. If the resistance is in range, the buscontroller 206 infers that the firing element is intact. The buscontroller 206 may then report test results in turn to a central vehiclecontrol processor (not shown) or may simply record that data internallyor display it in some manner to an operator or user of the networkedelectronic ordnance system 200.

Another built-in test function which is preferably performed by the buscontroller 206 is determination of the status of the network 204. In apreferred embodiment, network status is determined by sending a signalover the network 204 to one or more of the pyrotechnic devices 202,which then echo the command back to the bus controller. 206 or transmita response back to the bus controller 206. That is, the bus controller206 may ping one or more of the pyrotechnic devices 202. If the buscontroller 206 receives the expected response within the expected time,it may be inferred that the network 204 is operational and that normalconditions exist across the network 204. If such response is notreceived, it may be inferred that either the pyrotechnic device 202which was pinged is not functioning properly or that abnormal conditionsexist on the network 204. The bus controller 206 may also sense currentdrawn by the bus, or bus voltage, to determine if bus integrity has beencompromised. Other methods of testing the status of the network 204 areknown to those skilled in the art.

When it is desired to arm one or more pyrotechnic devices 202 for laterfiring, the process moves to step 402, in which the bus controller 206receives an arming signal. In a preferred embodiment, the arming signalcomes from a separate processor located within the vehicle or otherdevice utilizing the networked electronic ordnance system 200. Forexample, a vehicle control processor within a missile may transmit thearming signal to the bus controller 206. However, the bus controller 206may itself generate the arming signal, if desired. The bus controller206 may do so in response to a signal received from outside the buscontroller 206 or may generate this signal based on an input from a usersuch as the detection of a button being pressed. Such a scheme may beuseful in situations where human input is desirable as a step inensuring the safety of the operation of the networked electronicordnance system 200. For example, where the pyrotechnic devices 202 arelocated within a crewed vehicle, such as a aircraft or space craft, theuse of manual human input to initiate arming may be desirable to ensurethat the system is not inadvertently armed by automatic means.

Next, in step 404, the bus controller 206 issues an arming command toone or more pyrotechnic devices 202. In a preferred embodiment, thearming signal consists of an arm command and an address frame. Theaddress frame is as described above, and allows an arm command to betransmitted to one or more specific pyrotechnic devices 202. Each logicdevice 300 to which the arm signal is addressed receives the arm signal,and recognizes the address frame and arm command. The arm command causeseach addressed pyrotechnic device 202 to charge its ERC 302. The ERC 302draws power from the cable network 204 for charging. As described above,the cable network 204 preferably carries electric power having a currentin the milliampere range. In a preferred embodiment, the arming processis not instantaneous due to electric current limitations over thenetwork 204 and the physical properties of the ERC 302. That is, ittakes a finite amount of time or power to be transmitted over thenetwork 204 and for the energy reserve capacitors 302 to chargeutilizing that power. In a preferred embodiment, the ERC 302 takessubstantially five milliseconds to charge completely. Thus, the armcommand is preferably issued in advance of a fire command to allow theERC 302 of each selected pyrotechnic device 202 to charge properly.After the arming command has been acted upon in a pyrotechnic device202, the logic device 300 in each armed pyrotechnic device 202preferably responds to the bus controller 206 by transmitting its armedstatus over the network 204. The bus controller 206 may then report thearmed status of those pyrotechnic devices in turn to a central vehiclecontrol processor (not shown) or may simply record that data internallyor display it in some manner to an operator or user of the networkedelectronic, ordnance system 200.

In step 406, after one or more pyrotechnic devices 202 have been armed,it is possible to disarm one or more of those armed pyrotechnic devices202. Disarming is desirable in situations where the circumstances thatnecessitated arming the pyrotechnic devices 202 no longer exist. Thedetermination of whether or not to disarm one or more of the armedpyrotechnic devices 202 may come from a source outside the buscontroller 206, such as a signal from an external processor or a manualinput such as a press of a button or the term of a key by a humanoperator. It is also possible that the disarming signal is generated bythe bus controller 206 itself, which may be constructed to monitorcircumstances and then determine whether to issue a disarming command.

If it is desired to disarm one or more of the armed pyrotechnic devices202, the process moves from step 406 to step 408. The bus controller 206issues a disarm command to one or more of the pyrotechnic devices 202.In a preferred embodiment, the disarming signal consists of a disarmcommand and an address frame. The address frame is as described above,and allows an arm command to be transmitted to one or more specificpyrotechnic devices 202. Each logic device 300 to which the arm signalis addressed receives the arm signal and recognizes the address frameand disarm command. The disarm command causes each selected pyrotechnicdevice 202 to discharge its ERC 302. A bleed resistor (not shown) ispreferably connected across ERC 302, and the ERC 302 discharges itsenergy into that bleed resistor during the disarming process. A switcheddischarge device other than a bleed resistor may be used, if desired.The use of a bleed resistor or other switched discharge device todissipate energy stored within a capacitor is well known to thoseskilled in the art. After the disarming command has been acted upon in apyrotechnic device 202, the logic device 300 in each disarmedpyrotechnic device 202 preferably responds to the bus controller 206 bytransmitting its disarmed status over the network 204. The buscontroller 206 may then report the disarmed status of those pyrotechnicdevices in turn to a central vehicle control processor (not shown) ormay simply record that data internally or display it in some manner toan operator or user of the networked electronic ordnance system 200. Theprocess then ends in step 410. The networked electronic ordnance system200 is then capable of being rearmed at a later time if so desired. Ifso, the process begins again at step 402 as discussed above.

If it is not desired to disarm the armed pyrotechnic devices 202 in step406, the process proceeds to step 412. In a preferred embodiment, for anarmed pyrotechnic device to fire, it must receive a digital firingcommand and sense proper analog conditions on the cable network 204.That is, both digital and analog fire control conditions must be metbefore a pyrotechnic device can be fired. Data and power are bothtransmitted over the cable network 204. In step 412, at or shortlybefore transmitting a firing signal to one or more armed pyrotechnicdevices 202, the analog condition of the bus is altered to a firingcondition. Preferably, the bus controller 206 alters the analogcondition of the cable network 204 to a firing condition. However, otherdevices electrically connected to the pyrotechnic system 200 may be usedto alter the analog condition of the cable network 204 to a firingcondition. The analog condition of the cable network 204 is preferably acharacteristic of the electrical power transmitted across that cablenetwork 204. By way of example and not limitation, the analog conditionof the cable network 204 may be voltage level on the cable network 204,modulation depth, or frequency. However, other analog conditions may beused if desired. Preferably, the bus interface 312 senses the analogcondition of the cable network 312.

The bus controller 206 then issues a firing signal to one or more of thearmed pyrotechnic devices 202. The firing signal may be issued at sometime after the arming command, because the arming command places one ormore of the pyrotechnic devices 202 in a state of readiness for firing.As a safety measure, the pyrotechnic devices 202 are preferably notarmed until soon before the time at which they are to be fired. However,depending on the application in which the pyrotechnic devices are used,the pyrotechnic devices 202 may remain armed indefinitely if sorequired. In a preferred embodiment, the firing signal consists of afire command and an address frame. The address frame is as describedabove, and allows a fire command to be transmitted to one or morespecific armed pyrotechnic devices 202.

In step 414, each logic device 300 to which the fire signal is addressedreceives the fire signal and recognizes the address frame and firecommand. When a particular logic device 300 receives the firing signal,it communicates with the bus interface 312 to determine whether the businterface 312 senses the analog condition corresponding to the firingcommand. By requiring the pyrotechnic device 202 to sense both a digitalfiring signal and a corresponding analog bus condition before firing theinitiator 304, safety is enhanced. For example, if the logic device 300erroneously reads a digital firing signal at a time when the pyrotechnicdevice 202 is not armed, it cannot fire the initiator 304, because theanalog bus condition will not correspond to the condition required forfiring. If the bus interface 312 senses the analog conditioncorresponding to the firing command, preferably the logic device 300then operates the initiator 304. The logic device 300 closes a circuitbetween the ERC 302 and the initiator 304. The ERC 302 then releases itscharge into the initiator 304, firing the initiator 304 as requested. Ina preferred embodiment, the logic device 300 is destroyed or damagedwhen the initiator 304 is fired. However, the logic device 300 may beseparated far enough from the initiator 304 such that the logic device300 can transmit a signal confirming to the bus controller 206 the firedstatus of that pyrotechnic device 202 after firing.

In a preferred embodiment, signals traveling along the cable network 204are multiplexed to enable a number of different signals to travelthrough the same cable at the same time. Multiplexing two or moreelectronic signals over a single cable to reduce the number of cablesrequired for signal transmission is well known to those skilled in theart. The bus controller 206 multiplexes signals transmitted from the buscontroller 206 to the pyrotechnic devices 202, and demultiplexes signalsreceived at the bus controller 206 from the pyrotechnic devices 202.Each pyrotechnic device 202 preferably transmits signals to the buscontroller 206 on a separate frequency or with another separate propertysuch that those signals may travel together over the cable network 204to the bus controller 206. The transmission of signals from apyrotechnic device 202 is preferably controlled by the logic device 300within that pyrotechnic device. However, if desired, signals transmittedto or from the bus controller 206, or both, are not multiplexed, and areinstead transmitted in another manner that prevents interference betweendifferent signals on the cable network.

A preferred networked electronic ordnance system and many of itsattendant advantages has thus been disclosed. It will be apparent,however, that various changes may be made in the form, construction andarrangement of the parts without departing from the spirit and scope ofthe invention, the form hereinbefore described being merely a preferredor exemplary embodiment thereof. Therefore, the invention is not to berestricted or limited except in accordance with the following claims andtheir legal equivalents.

1-30. (canceled)
 31. A networked electronic ordnance system, comprising:a bus controller connected to a network for (1) transmitting onto thenetwork digital arming commands using at least one unique identifier,(2) altering an analog condition of the network to correspond to afiring command, and (3) transmitting onto the network a digital firingcommand using at least one unique identifier; and a plurality ofpyrotechnic devices connected by the network to the bus controller, atleast one pyrotechnic device comprising: a bus interface for sensing theanalog condition of the network, a capacitor for storing activationenergy, an initiator, and a logic device having a unique identifier thatstores activation energy in the capacitor upon receiving a digitalarming command that includes the unique identifier of its logic device,and, once armed, releases the stored activation energy from thecapacitor into the initiator upon (1) detecting that a digital firingcommand is received that includes its unique identifier, and (2)determining that the bus interface senses that the analog condition ofthe network corresponds to the received firing command.
 32. Thenetworked electronic ordnance system of claim 31, wherein an analogcondition of the network can be its voltage level, modulation depth, orfrequency.
 33. The networked electronic ordnance system of claim 31,wherein the at least one pyrotechnic device discharges the storedactivation energy when a digital disarming command is received thatincludes the unique identifier of its logic device.
 34. The networkedelectronic ordnance system of claim 31, wherein the plurality ofpyrotechnic devices are integrated into a missile.
 35. The networkedelectronic ordnance system of claim 31, wherein the plurality ofpyrotechnic devices are integrated into an aircraft.
 36. The networkedelectronic ordnance system of claim 33, wherein after a disarmingcommand has been acted upon in the pyrotechnic device, the pyrotechnicdevice responds to the bus controller by transmitting its disarmedstatus over the network.
 37. The networked electronic ordnance system ofclaim 31, wherein the bus controller generates the digital armingcommand.
 38. The networked electronic ordnance system of claim 31,wherein after an arming command has been acted upon in the pyrotechnicdevice, the pyrotechnic device responds to the bus controller bytransmitting its armed status over the network.
 39. The networkedelectronic ordnance system of claim 31, wherein the bus controllerperiodically queries pyrotechnic devices at regular intervals to confirmthat firing capability in the device remains intact.
 40. The networkedelectronic ordnance system of claim 31, wherein the bus controllerdetermines network status by transmitting a network signal to one ormore pyrotechnic devices and then sensing whether the signal is echoedback in response.
 41. A networked electronic ordnance system,comprising: a bus controller connected to a network for (1) transmittingonto the network digital arming commands using a least one uniqueidentifier, (2) transmitting onto the network digital disarming commandsusing at least one unique identifier, and (3) transmitting onto thenetwork digital firing commands using at least one unique identifier,and a plurality of pyrotechnic devices connected by the network to thebus controller, at least one pyrotechnic device comprising: aninitiator, and a logic device having a unique identifier that storesactivation energy upon receiving a digital arming command that includesits unique identifier, and (A) releases the stored activation energyinto its initiator when a digital firing command is received thatincludes its unique identifier, and (B) discharges the stored activationenergy when a digital disarming command is received that includes itsunique identifier.
 42. The networked electronic ordnance system of claim41, wherein the plurality of pyrotechnic devices are integrated into amissile.
 43. The networked electronic ordnance system of claim 41,wherein the at least one pyrotechnic device includes an energy reservecapacitor for storing activation energy in the device, and the capacitorcharges from current transmitted in the network upon receiving thedigital arming command.
 44. The networked electronic ordnance system ofclaim 41, wherein after a disarming command has been acted upon in thepyrotechnic device, the pyrotechnic device responds to the buscontroller by transmitting its disarmed status over the network.
 45. Thenetworked electronic ordnance system of claim 41, wherein the buscontroller periodically queries pyrotechnic devices at regular intervalsto confirm that firing capability in the device remains intact.
 46. Thenetworked electronic ordnance system of claim 41, wherein the buscontroller determines network status by transmitting a network signal toone or more pyrotechnic devices and then sensing whether the signal isechoed back in response.